Is it not possible to run GCP cloud functions (or any GCP serverless compute resources for that matter) inside private networks? Are they always using shared capacity and public networks? Am I missing something? Don't confuse this with egress, I know it is possible to access private networks from serverless resources, but is it possible to limit access to the functions at the network level? AFAIK you can do this with lambdas on AWS and with app service on Azure (although on Azure it was expensive since you need to move away from shared capacity).
1 Answers
You have 2 way traffic in Cloud Function: ingress and egress
- Ingress: you can limit the traffic coming from internet, or uniquely from project VPC or VPC SC
- Egress: By default, the traffic is directly routed to internet. You can use a serverless VPC connector for:
- Either routing only the private IP (RFC1918) to the VPC
- Or routing all the traffic to the VPC.
Related